Lucene search

K
openbugbountyG0bl1nsecOBB:1167146
HistoryMay 20, 2020 - 7:38 p.m.

americanssd.com Cross Site Scripting vulnerability

2020-05-2019:38:00
g0bl1nsec
www.openbugbounty.org
10

Open Bug Bounty ID: OBB-1167146

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: americanssd.com
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: g0bl1nsec
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAABfCAIAAACxwoBIAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAaTUlEQVR4nO2df1BU1fvHr7DaCosC7i4rYEA55jQOoZFRUcOYY+QwtlNq1DBK5phSGpGZmENIDX6GoJxqyj/IwXLqn6ZhmKaxxn6R0xiis+CGtCEhrkS1MGhrLbR4Pn+cb/d7P/eec+7Zu3t3L/C8/mIP58fzPOfc+9y7d+/7zEIICQAAAACgA3GxNgAAAACYtkCOAQAAAPQCcgwAAACgF5BjAAAAAL2AHAMAAADoBeQYAAAAQC+mcI65dOmSzWaz2WyvvPJKrG2JKg899JDNZsvJydF1lJycnK6uLl2HAGJIV1fXjh07aP/9559/Hnvssd9++42zN1gtAI0pnGOuX7/+119/uVyuysrKWNsSVZqbmz/99FOfz6ffEOfOnbt+/fptt92m3xBAbCkvL8/Ozqb9d/bs2XPmzNm9ezdPV7BaAAYRyDEXL15MSUnhL48gcXFxGRkZSUlJkerwypUrBw8eZNe5ePFiBEck9s+Om81mczgcqp2EY2RbW9u6des0N+e3IaSAR2FF0YZmw+NFzJEaOTIy0t3dLb04Gx8ff+yxx6TOVlZWnjhxgqfnqK0WgTvU33777fLlyxMTE++6665z585pMCZW57TpxxS+j9GDsbGx+vr6WFsReyJy1sjKylK92TJ4wHlcEAzvBUZqpN/vT0hIuOGGG/DH8fHx4uLiYDAorZ+amur3+3l6jtpqEbhDXVpaWltb6/V6i4uLt2zZEqZtQDhAjpmemEymJUuWaGv766+/ejyeoqKi8M0Qz2LhIPoSjlOaiYgLBmd4eHj16tWNjY0a2hpttWCCwWB+fn5KSkp+fv7ExESkugU0oJ5jTp8+fdddd82dO9dms23YsOHy5cuCIFy+fPmBBx5ISkq65ZZbPvzwQ7EysRzfBR88eNBmsy1cuPC9994TBGF8fPzJJ59MSkrKysp6+eWXJycnxeHuvffepKSkjIyMRx555Pz587RCKXiI1157LS0tLSUlZfPmzX///Tf+17Vr15566imbzbZo0aIDBw4wBrpy5Up2drbf7581a9bRo0dpvnMyOTlZXV2dlpaWmJi4YcOGkZERhjG0eNKipEpGRsaZM2fw359//rlqfWmdtra2NWvWzJ49W6BEnuiacpal33ERZ0cZcKKpoi8ZGRk//PADp1NiBdriUXrBcIHfC6JhtLbEQ4O4SHDNpqamnJycxMTERx99dGRk5IUXXrDZbAsWLHjiiSeuXbsWUqilZGVlvfTSS+x4EmMrcKyWKIcaU1FRsXbt2qeffnrfvn3SAwqj0zkNIIPUOHz48JEjR8bGxoaHhysrK51OJ0LI6XSuX79+cHCwr69v2bJlycnJuDKxfGBgQBCETZs2DQ8PHz9+vLe3FyG0b9++0tLS/v7+np6eoqKit99+G/dgt9ubm5tHR0f7+/tff/31/v5+WuHAwIDFYsGt8BDSoWtra/G/tmzZUlJSMjg46Ha7V6xY8eabbzIG6u3ttVgsgUAgGAzSfJeOy6C+vj4/P7+7u9vr9e7atau9vZ1hDC2etChJbbAqkFnicDhWrVrV2dlJtLOjo2PVqlUOh0MsWbt27bFjxxhRIrqmnGXRSMbsyALONpXTKZlHRBeIXjBc4PeCaBitLfHQIC4SXLOsrMzr9Xo8nsLCQqvVWl5ePjQ0hG8jdu3axW8kcQ3LCol1NKyWKIca09DQYLFYEhIShoaGlP/V6ZwGEFHPMVL6+vocDkcwGDSbzYODg7jwk08+wXGnleP5GB0dlXZltVr9fj/+2+VyrVy5EiE0OjpqMpkCgYC0JrEQkXKMdOj8/HxsksViEdd6W1tbQUEBZ59E39l1pNjt9rNnz0pLaMbQ4oYoUZLZ4FUgs8Tv99fX16empm7cuNHj8YjlHo9n48aNqamp9fX14ih+v99iseDJokVJ6RoizbIsxyhnBymCSTNVCbGm0iOaC0QvGC7we0E0jNZWOSJtkeCaY2NjuPzkyZNxcXF//fUX/vj9998vXryY30gNOUbzaolyqBFCzc3Nubm5w8PDRUVFxcXFCKG+vj673a40DEX0nAYQUc8xZ8+eXb16dXp6utVqTU1NTU5OHhoaMpvNYoWenh4cd1q5ckGPjo4KgiBed6empooroLS0NC8vr6qqqrGx8ZtvvmEUyhalbGjc4dDQ0Jw5c8Ryj8cjXoKp9kn0neiOkrGxMZPJhK/NRWjG0OLGiBJnnpMyOjrqdDpNJpNYYjKZnE6neNrCfPLJJ6tWrRI/KqNEdI1okjTHEGeH5ojSVE6niB4RJ5roBcOFUL2QGUZrq2xIWyTKBCBeiEg/chqpIcdoWy0o6qFGkpQ2NDRktVrr6+tPnTqVl5cnVtDjnAbQUH8e43Q677vvvvb2dpfL9dlnn4X0RRyNQCAQFxfX2dnpcrlcLld3d7fL5cL/+uijj/BlyMTERFVV1c6dO2mFYcLTZ5i+x8fHh2MhI0pSbAqUdS5cuPDMM8+0t7fX1dWJhXV1de3t7RUVFRcuXBALZb8RokUpTNcYEE3lrEn0iDHROnnB78IUIpzVIkQx1H/88cfo6Ojy5csFQVi4cGFLS0tNTU1DQ0NhYaHYSo9zGkCFnYJ+//136QWCy+VKTk6W3T+2trYS7yvFcmLOt1gsyu9bZLhcrszMTFoh4+a6tbWV/V0ZT59E32nuKLHb7S6XS1rC+V2ZGDdEj1JI35Vt377dYrFUVVX5fD7Zv3w+X2VlpcVi2b59O7bEarWKFsoQo6R0DandxxBnR9mKYSqnUzKPaC4QvVC9uObxgmgYra1yRMZ3ZZz3MTxGanseo221oOiGGh9N0q/Otm3bJgiC2+3GH/U7pwFE1L8rs9vt77zzztjYmMfjcTqdOMT4OZjX63W73Xl5ebLnY7Jy4nxs3769oKDA7XYPDQ01NDTU1dUhhHp6eoqLi7/66iufzzc4OLh169aSkhJiISItSunQ4kPCrVu3rlu3TvYEldan3+83mUziAiX6fvXqVZPJ1Nvbq/y+SEp9ff3KlSvxc058qUUzhhFPYpRoIaVRVlY2MDDAqDAwMFBWVoYQam9vX7ZsmVhOixLRNdUcQ5wdWcBVTeV0SvSI5gLRC54Tn6oXRMNobYnzSFwkIeUYVSMHBwelXwEpnUUI9fX1SYdQxpZztUQ51AihioqKu+++2+12+3y+lpYWq9XqcDj2798vVtDpnAYQUc8x7e3t+fn5ZrPZ4XBUVVXhEHu93jVr1lgsliVLljQ2NorzQSwnzkcgEKisrMzMzExISFi7di2+GpqYmKitrV2yZMmcOXPsdntZWdnw8DCxEJGuy/7zn//Y7fbk5ORNmzaJj0P9fv+2bdusVmtmZmZtbS1ODLQ+EUK1tbUJCQktLS003xFCe/fuFevQCAaDe/bssVqtZrPZ6XTiSy2iMYx4EqNEC2n47N69e9++feJHWpSIrrFzDG120P8GPOIwJlrpheqJT7MXtLbEeSQuEv4cw2NkIBCQXewrh/j4449zc3MZseVcLSi6oUYIBQKBvXv3Zmdnm83mFStWHDt2rL+/PyEhAV8MId3OaQCR0H5XZijwxY7Vaq2rq5tRU75u3brU1FQ9/F2yZMmpU6ci3u30mJ1wvIhaBPgH2rVrl/RxvYxAIJCdnd3c3MzoQafVgqbLggEwpig99tGBzMxMr9crCMK8efPwT7BmCM3NzRMTE3Fxkddo+OmnnyLeJ2BMGhsbiT8hwdxwww3Hjh275557GD3AagF40F1LRj8F/vj4+IyMDFVNTF2V8MWfcsXHx6ekpIgf//zzTz2GEwfNyMhYuHChfkMAMrq6uthvwockhm8EJfzZs2ffcccdjArsBAMAnOh+H4MV+D0ez7x58/Qei0hzc3N/f//q1av16BxfCfb29m7atKmjo0Ms11WYGYg+5eXlDzzwAKOCKIb/wQcfsLsCJXxgRhENTUweBf4w1dGzsrKktw7S3nRVwsc3UqdOnXr44YczJGjoKlLa5gZUwmfMjmFRKuEfOHBA9EKphC8wxfClEdBVCV9bqFWV8J977rm5c+e+/vrrGg4TDdMt8yI66L1nx8xF7wc+nI/vIvuUT/WX/pEdfeXKlV988YXm5iJEHQ4Z/L7IfnoUHSLighFgvE0SCASKiorWr1/P+GUUA0OtFozD4WhtbR0dHa2trRXfRBHx+XxxcXEulysYDPIMqs2GmDNV7JxygLa/IIASfuQAJXw2RlstGLYSPt5s5rbbbouPj5/G8xuT42VGoJqFAoHAli1bLBbLjTfeWFNTg3+t39HRUVhYaLFY0tPTH3744Z6eHlxZWS67OiA2HBsbE+1paWnBTerr6/HLU/gHlEQziIWy3lCIVyjHjx8Pqc7hw4c3btzI8A4hFAwG9+7da7fbExIS1q9fL74fIPVReeHc0NAgez9A5hqPqZxOSSsQvdDJBaJttLbEhcF4m6SxsTE7OzshIWHjxo0+n2/37t1Yn6q8vByrOnIayfNWPLFEGVvpajFCqDE1NTW5ubkVFRW5ubni+/AY6b5hTU1NskFlc6F0R2kDEel8JScnP/7446IwWkdHR0FBgdlstlqt+F1I/vlFlFMED/wHF8BGPccQ5eVpIt7KctmBR2soEx4X+PYCoEnfyxTjZTawxfAjroSPYqFtLoNfCZ/mhU4uEG2jtSUuDIMo4RNL2KvFCKHGsJXwxU76+/tlg8rmgme/DCJib3iCCgsLKyoq8L9o+2vwzC+inyLC3BED4Ec9xyjl5Wki3sRy6cHAUP9WHjM8ewHwSN8rP7IFviKuhI+irm2uhFMJn+GFTi4QbaO1VY5oHCV8WYnqajFIqBGHEr5Mr4Fmkob9MmQOXr16FX88efLkTTfdpKwm3V+DZ34R/RSheUcMIFRUcgxNXp4o4k0sl60wWkP2IU00g1/6XsPTvEgp4aNYaJtzOkX0iOiF3i7IbKO1VTY0jhK+rIRntSADhBpxKOHTcoyyZ579Mogw5otnfw3a/DJOEZzwH1wADZX3Y0R5eZPp/2ri18s/+uijM2fOYK3Gqqqqu++++6233iKW7969W9ohraEGM2i2qaJUv//jjz+kHy9cuFBTU6NUwm9sbKyoqKirq7v55ptxoVLbnOadftrmSlM5axI9Inrx6quv6udCSF5MFXhWi2CAUCuV8J1OZ2dnp1QJnx9tRzcbp9O5devWw4cPm81mr9dbXFzM35ZxilA9CQjTcVnGBtUsZFET4Scq8IvljKsYaUPVSySiGTTbwvmuLOJK+Ci62uZEtCnhI6aef0RcINpGa6sc0ThK+MqSkFYLilGoVZXwpZ2oxoToTjj3MZz7a9DmF9FPEeHsiAGEhHqOUcrL00S8ieXS1cBQ/5ZKdhMXJVHlniZ9L1OMD+m7sogr4aOoa5uH6pToEcMLnVwg2kZrS5xHgyjhI4oYPm21GCTUiEMJnzPHcO6XQYQxX0Qdfv4cQztFqMJ/cAFsuH67LJOXp4l4E8ulq4Gh/o0kkt3EUwlR5Z4mfY/+VwBcw/MYHgyrbR4O/Hr++rlAa0ucR4Mo4SM1MXzZakHGCDXiUMLnzDGc+2UQYcwXUYefP8cwThFAdIjGe/7Cvwr8eo9FZMop4SPdkmI0CceFqLnPPxBbCR9xiOHDagFmJrprYkoV+PUeiwgo4QPhw1bCFzjE8GG1ADOTcM+8qirlnAr8+gFK+Jrp6urasWMHo0JIgvaCMTTttaGqhC/MSDH8UCfURiH6CphA1AjrPgZUyqc35eXlpaWljAr8gvYCrJZph4YJpd0LguDxNCas+xhdVcqlGFnQXoicLL9ITLTNMaKRWNC+srJS+l+lpj1N0F7pAv9qYbgf2VAPDAwsXryYqGkfjtJ7lDcv0LxawlSz13D4ZygIBoNLly5lt+KJZ2zPAACLcB7mRE2lXPWppvSnL9EXtEfTUdNeaS1R057fqamlaT8lfrMQJmHaaZzDHxngDADQ0H4fYyiV8tgK2gugaa+GoVaLCFvTftoDW1oA0SCkjBSSpr1Sohz9e7lBVCnHf4QjUc42mF3BCLL8tLbKEZH+mvZSIXelkbSPtOAbcwcEhqa9zC+iwjzPRhW0oaUzZQQ1+4hvaTFzDn9OY2YsvDlGg6a9UqIc/fu6DFGlXHxdWbNEuRJ+TXsjyPLT2ipHRPpr2kuF3GVGquaYqbIDAkPTXuYXUWGeZ6MK5aBS46OmZh+mlD0c/ow1qWrGDEc9x2jWtFdKlKN/VxJRpXwgPIlyIpya9gaR5ae1VY4YBU172g0KO8dMoR0Q2Jr2jPszrDDPuVEFjYHoqtlrlrKHw191TQJs1HOMNk17okQ5Ih1+0kUWjkQ5Ax5NeyPI8tPaKhtGQdNeW46ZQjsgsDXtZT0QFeZ5NqqgwZipGKrZR2pLixl1+ANs1J/519XVtbe3V1RUXLhwQSxUatrjq8KJiYmqqqqdO3ficl0lyrFcII+mvawm0SOaC4KesvycLkwhwlktQhRDrdS0r6mpaWhooGnaO53O++67r7293eVyffbZZ6qOhANxLE5ENXuXy+Vyubq7u/ErKcrXHpVtiQsSDn/9vJgp8CQibZr2SolypHYhI2iVKKehTdM+VrL8tLbKEaOgaa/tPgZNkR0QVDXtpT3QFOZpjoRzH6OTmn04UvZw+LNdANiE8LuygRA17ZUS5YhjkWmWKCfCqWlvEFl+WlvistZb054oaK8cgihoj0JfLVEONVLTtL969arJZOrt7cVflSgV5jk3qqDBmKmYqNlHfEuLmXP4A2y0vIPJqWmvlChHaovMYjBBe6IXqic+zV7Q2hKXtd6a9s3NzUpBe+UQbEF7ZOAdEFQ17ffu3Sv2oFSY59yogjY6Y6YMrmYPhz/kmJDQkmN0UimfHpMXjhdRiwDnQOEL2iPQtJ92wOEPhIQWTUxQKZ8hhC9oL8BqmXbAhAIhofv+McDUBQTtw4f4Cy5BEPr7+0FsGJgJzNAc09XVdfjw4XfffZdW4Z9//tm0adOhQ4fS0tJ4OszJyWltbQXhekAGqNkDM5xZCKFY2xADli9fXlpa+uKLLzLqbN68+fr165w7o5SUlFy8eDFyBgIAAEwHVN7BjMjmLkZAaqRyZxTltigCfWcUJeHvoxPxHWgAAACMgEqOycrK8vl87DpjY2P19fWRM0kXpEb6/f6EhARRUXx8fLy4uDgYDMqapKam+v1+ns7DzzE8cRamSKgBAABE1LVkpv3OKOFsiyJEbiONaR9nAABmILzfleE/XnvttbS0tJSUlM2bN//999+CIFy5ciU7O9vv98+aNevo0aOCIHz++efETpRtcfnBgwdtNtvChQvfe+89QRCuXbv21FNP2Wy2RYsWHThwYHJyUqzZ1NSUk5OTmJj46KOPjoyMvPDCCzabbcGCBU888cS1a9dCMlJKVlbWSy+9xB8ymYNtbW1r1qyZPXu2IAinT5++9957k5KSMjIyHnnkkfPnzwuCMDk5WV1dnZaWlpiYuGHDhpGREaXj0u/Kwgk1AACAoQhhH0y/39/R0dHZ2dnZ2Xn27NmGhgZBEObPny/u7lBWViYIQnl5+f3333/mzBnVtri8t7fX7Xa3tLRgOcJdu3YNDQ2dPXv2+PHjbW1t77zzjljT5XKdPHnS5XINDQ0tXbrU5/N1d3efOnVqYGBg3759IRmpjdOnT99///3l5eXSQukXZSUlJeXl5YODgydPniwsLDSbzYIgNDQ0nDhx4sSJEx6PJz09vaenh+h4pEINAABgINivaNIU60La3YHWdiAW26IoDaYVSkuIu2ggrRtpKB1nSD1GZCMNAACAmBDCfYzZbF60aBH+e+nSpYODg8RqiYmJ1dXVfX19ExMTt956K7utxWJJSUkR2/7+++8TExM5OTliTXzCxTXnz5+P/87MzJw3b97cuXPxx/T0dPGBOaeRoXLrrbdOTEz09/dXV1cnJiaK5V988cXKlSuxCykpKevXry8oKHj++eebmpq+/fZbQRCuXLkyOjqam5sr61DmuIxwQg0AAGAcQsgx/Ey/nVGIe04IU2ojDQAAgOgTQo4JBAKXLl3Cf3s8nhtvvJFYbceOHXl5eQ6Hw+PxVFdXh9TWbrfPmTPnl19+wR97e3uzs7P5LeQfKFSqq6s9Ho/dbs/Ly9uxYwcunJyc/PTTT2W/Wr799ts3b95cXV195MiR1tbW+fPnp6amdnV16eEFMdQAAADGIbT7mKqqqsuXL//444+1tbUlJSW40Gq1BgKBn3/+GX/0+/1ut7upqWnBggWqbWXEx8eXlpZWVlZeunQJ13z88cdDdUnVyLi4OOXbMEqCwaDJ9P9aOwsWLHjjjTfcbrf40sz333/vcDjEb/bOnz//4IMPfv311yMjI5cuXXr77bfz8vIEQaisrNy2bdu5c+cuX768c+fO7777LiJeCPRQAwAAGIQQcozFYsnPz1+xYkVhYWFubu6ePXtweWJi4v79+/Py8vAPaj/44IOsrCzOtkoOHTrkcDhWrFhRXFy8bt26ioqKkPzhMdJutwuCIJ6pabhcLuUNRFZWlqguI/uibPHixQUFBdu3b09PT8/Pzw8EAs3NzYIg7Nmzp6ioaNWqVYsXL/Z6vTwPTsIJNQAAgHHg1Su7ePHismXL/vzzTw1jhNNWp4GeffZZt9v95Zdf0iqMj48vXbp0//79Tz75JK3OLbfc8v777995550azaUQtXABAADozQzVXYadUQAAAKKALr8rMz6wMwoAAEAUmKE5BgAAAIgCM3T/GAAAACAKwH0MAAAAoBeQYwAAAAC9gBwDAAAA6AXkGAAAAEAvIMcAAAAAegE5BgAAANALyDEAAACAXkCOAQAAAPQCcgwAAACgF5BjAAAAAL2AHAMAAADoBeQYAAAAQC8gxwAAAAB6ATkGAAAA0AvIMQAAAIBeQI4BAAAA9AJyDAAAAKAXkGMAAAAAvYAcAwAAAOgF5BgAAABALyDHAAAAAHoBOQYAAADQC8gxAAAAgF5AjgEAAAD04r9fmeMhaP3a5QAAAABJRU5ErkJggg==)

Screenshot: americanssd.com  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 20 May, 2020 19:38 GMT
Vulnerability Verified: 20 May, 2020 19:53 GMT
Website Operator Notified: 20 May, 2020 19:53 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 20 May, 2020 19:53 GMT